banned members bug
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=12099
Printed Date: 09 April 2026 at 8:32am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: banned members bug
Posted By: kbannon
Subject: banned members bug
Date Posted: 09 October 2004 at 5:15pm
|
I often have to ban members for 1 month. I usually de-activate their accounts. However, I have just noticed that they can re-send the activation email. The only way around this is to change their email addy to one of my own so the email cannot be recieved by them & I know if they are trying! Maybe include a banned field in the next version? ------------- I don't suffer from insanity, I enjoy every minute of it. |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 8:58am
|
Thanks for letting me know I'll have to look into it.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 9:00am
|
However, I have just remembered that even if they do have an actiavtion
email sent through the activation page checks to see if the user is
banned, if they are it will not activate the account.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 9:02am
|
I have just checked the code on the resend activation email page and
there is a check that if the user has had their account suspended they
are sent to an insufficient permissions page. Make sure that you are running the latest version and that the file is not corrupted. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: kbannon
Date Posted: 11 October 2004 at 4:20am
|
Thanks Borg. Using v7.9 (SQL Server) which is not corrupted, I tested it and still someone whose account has been disabled can request a new activation email. When you suspend an account, do you just click the radio button in their profile or am I missing something? From what you say, there must be something in the code that ticks a button or whatever in the DB when an account is disabled by a moderator? ------------- I don't suffer from insanity, I enjoy every minute of it. |
Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 8:26am
|
In the profile you need to select that the user account is not active. I have been through and tested this and if your account is suspended then it will display a message saying so for many parts of the forum. If you try a go directly to the, resend activation email page (as a link will not appear to it), then you will be sent to a page saying you don't have sufficient permissions to go to that page. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 8:42am
|
Sorry forgot to mention, it's not your database I was saying maybe corrupted, but the ASP files on the server. Try reuploading the ASP files. On the of biggest problems I find when people report errors is that s afile has got corruopted when FTPing them to the server. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Emiliano
Date Posted: 11 October 2004 at 1:34pm
|
boRg, I had this problem too. I think if you just set the user account as not active and the user still has the original activation e-mail, he will be able to re-activate his account. I don't know what happens if you really ban his e-mail address. |
-boRg- wrote:Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 1:48pm
|
The activation email can only be used once. If you try to reuse it, or even refresh the page it will rerurn an error on the activation page, as the user code is changed when an account is activated. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Emiliano
Date Posted: 11 October 2004 at 6:33pm
|
Hmmm... I don't know then... :-( I set an user as not active and for my surprise he was able to login and post again. I could only think he had used his original activation email message. I need to find out what he did... Look boRg, I'll make some tests tomorrow and let you know if I find out something, ok? []s, |
Posted By: WebWiz-Bruce
Date Posted: 12 October 2004 at 5:34am
|
If you could, but I have found in the past when such things happen that
the person has hasselled a moderator to re-activate their account.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: kbannon
Date Posted: 12 October 2004 at 5:10pm
|
the file login_user_test tells me when I try logging in with a de-activated account the following:- Successful Login Tried re-uploading the file but the above message is copied from the result! ------------- I don't suffer from insanity, I enjoy every minute of it. |
Posted By: Emiliano
Date Posted: 12 October 2004 at 5:26pm
|
Dear boRg, After some tests, that's what we have: 1 - If you simply set the user as not active and this user tries to log in, he will be able to resend his activation email and will also be able to activate his account. 2 - If you set the user as not active and ban his e-mail account, it's just the same. I think banning works only to new registrations, right? 3 - If you set the user as not active and he tries to use his original activation e-mail, his account will not be reactivated! That's exactly what you said. When I say that I banned the user, I'm talking about banning his e-mail address. I can't ban his IP because of dinamic IPs and I have not found any other kind of banning -- like banning a username. That's it for now. I think we must really change the e-mail address of the "banned" user in order to avoid his account reactivation. |
Posted By: Emiliano
Date Posted: 12 October 2004 at 5:28pm
|
Ah, just one more thing: this is not my case, for I'm the only moderator in the forum. ;-) |
Posted By: WebWiz-Bruce
Date Posted: 13 October 2004 at 4:43am
|
I've found the problem, there wasa bug in the file login_user.asp that
ment that even if an account was deactivated a new usercode would be
created when the user logged in over writing the suspension data. I did correct this problem but it seems in the rush to get 7.9 out, as people where hasselling me, I forgot to add the updated file to the zip file. You'll have to wait for the next version in order to fix this bug now. Sorry. This is why in my tests I could not replicate the problem. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Emiliano
Date Posted: 13 October 2004 at 12:11pm
|
boRg, There's no problem at all to wait for the next version. We can handle this little problem the way kbannon did:
Right? ;-) []s, |
Posted By: kbannon
Date Posted: 14 October 2004 at 4:42pm
|
Fair Play Borg! ------------- I don't suffer from insanity, I enjoy every minute of it. |